Vulnerabilidades do Smn2gnt MCP-Salesforce
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Smn2gnt MCP-Salesforce: 1 registro(s), com versões afetadas e correções.
CVE-2026-25650
Alta · 7.5
CWE-200 06/02/2026
MCP Salesforce Connector has arbitrary attribute access which leads to disclosure of Salesforce auth token
MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration. Prior to 0.1.10, arbitrary attribute access leads to disclosure of Salesforce auth token. This vulnerability is fixed in 0.1.10.